diff --git a/checks/nixos-test.nix b/checks/nixos-test.nix
index f6409f5..1d70bde 100644
--- a/checks/nixos-test.nix
+++ b/checks/nixos-test.nix
@@ -588,7 +588,7 @@ in
 
       # must run before sops sets up keys
       systemd.services."sops-install-secrets-for-users".preStart = ''
-        printf '${builtins.readFile testAssets + "/age-keys.txt"}' > /run/age-keys.txt
+        printf '${builtins.readFile (testAssets + "/age-keys.txt")}' > /run/age-keys.txt
         chmod -R 700 /run/age-keys.txt
       '';
     }
diff --git a/flake.nix b/flake.nix
index 72b306b..b389c09 100644
--- a/flake.nix
+++ b/flake.nix
@@ -93,12 +93,12 @@
               nixpkgs.lib.mapAttrs' (name: value: nixpkgs.lib.nameValuePair (name + version) value) attrs;
             suffix-stable = suffix-version "-24_05";
           in
-          tests
-          // (suffix-stable tests-stable)
-          // (suffix-stable packages-stable)
-          // {
+          {
             home-manager = self.legacyPackages.${system}.homeConfigurations.sops.activation-script;
           }
+          // (suffix-stable packages-stable)
+          // nixpkgs.lib.optionalAttrs pkgs.stdenv.isLinux tests
+          // nixpkgs.lib.optionalAttrs pkgs.stdenv.isLinux (suffix-stable tests-stable)
           // nixpkgs.lib.optionalAttrs pkgs.stdenv.isDarwin {
             darwin-sops =
               self.darwinConfigurations."sops-${pkgs.hostPlatform.darwinArch}".config.system.build.toplevel;